@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.8.4) +17 more potentially affected by CVE-2024-51434 via froala-editor (>=4.0.0, <=4.2.2)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =26.2.3, =26.2.3, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.2.2 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2024-51434 Source advisory: OSV:GHSA-549P-5C7F-C5P4...

CVE-2024-51434

creationtimestamp| type| source ---|---|--- 2024-11-07 21:32:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113443809109465362 2024-11-07 23:37:53+00:00| seen| https://t.me/cvedetector/10137...

CVE-2024-51434

CVE-2024-51434 affects Froala WYSIWYG Editor, with versions 4.3.0 and earlier vulnerable due to inconsistent parsing of the tag, enabling cross-site scripting (XSS). The issue is supported by multiple sources in the Connected documents, which identify the affected product and root cause. Impact ...